CVE-2025-48929

The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...

CVE-2025-48926

The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...

CVE-2025-45997

creationtimestamp| type| source ---|---|--- 2025-05-28 15:22:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiud5pwjr2 2025-05-28 15:22:48+00:00| seen|...

CVE-2025-5277

creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585800636728854 2025-05-28 15:27:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaj63cav5t2...

CVE-2025-4493

creationtimestamp| type| source ---|---|--- 2025-05-28 12:54:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585560171227469 2025-05-28 15:22:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiupdy22z2 2025-05-28...

CVE-2025-48846

creationtimestamp| type| source ---|---|--- 2025-05-28 07:30:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7onaue5g2r...

Malicious code in loglinea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799f4899d8d2f6f45f1548fbb2b601f27c8f078d7b0db92af859a074f8dc3971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4947

creationtimestamp| type| source ---|---|--- 2025-05-28 03:48:12+00:00| seen| https://daniel.haxx.se/blog/2025/05/28/curl-8-14-0/ 2025-05-28 03:51:53+00:00| seen| https://seclists.org/oss-sec/2025/q2/173 2025-05-28 07:45:19+00:00| seen|...

CVE-2024-26579

creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...

CVE-2025-48925

The TeleMessage service through 2025-05-05 relies on the client side e.g., the TM SGNL app to do MD5 hashing, and then accepts the hash as the authentication credential...

CVE-2025-48926

The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...

CVE-2025-48927

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2025-48930

The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues...

CVE-2025-48928

CVE-2025-48928 affects the TeleMessage service (TeleMessage TM SGNL) running a JSP-based application up to 2025-05-05. The issue is that heap content can resemble a core dump, exposing passwords previously sent over HTTP within that dump. Exploitation was observed in the wild in May 2025. Public ...

EUVD-2025-16214

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025...

CVE-2025-48929

The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...

CVE-2025-48925

Summary: The TeleMessage service (through 2025-05-05) relies on a client-side MD5 hashing step (in the TM SGNL app) and accepts the resulting hash as the authentication credential. This design implies that authentication can be performed using a hash generated on the client, effectively tying cre...

CVE-2025-2826

creationtimestamp| type| source ---|---|--- 2025-05-27 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114582383243251984...

CVE-2025-5279

creationtimestamp| type| source ---|---|--- 2025-05-27 20:31:26+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lq6jtgfb5u22 2025-05-27 20:59:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lexpmmf42 2025-05-27...

CVE-2025-5250

creationtimestamp| type| source ---|---|--- 2025-05-27 17:47:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6anwzr5662 2025-05-27 17:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17689...